Описание
Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.
Ссылки
- Patch
- Issue TrackingPatch
- Release Notes
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.17.1 (исключая)
cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00288
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-203
Связанные уязвимости
CVSS3: 4.3
debian
3 месяца назад
Weblate is a web based localization tool. Prior to version 5.17.1, the ...
CVSS3: 4.3
github
3 месяца назад
Weblate Vulnerable to Private Translation Enumeration via Screenshot API
EPSS
Процентиль: 21%
0.00288
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-203